kosmos/chef
kosmos/chef
8
3
Fork 0
Code Issues 32 Pull Requests 1 Projects 1 Activity

Add notes about getting LE certs using acme.sh

Browse Source
This commit is contained in:
Basti 2018-08-28 14:31:38 +02:00
parent d0f2275ebb
commit 412c108dbc
1 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
doc/letsencrypt_acme_sh.md Normal file
View File

@ -0,0 +1,18 @@
# Getting LE certs via auto DNS config
This is helpful when getting certs for domains which are scattered across
machines/IPs. The [acme.sh](https://github.com/Neilpang/acme.sh) script will
automatically configure DNS TXT records for LE to verify, instead of relying on
Web requests to the machine.
We need to automate this in a cookbook.
## Steps
Export Gandi Live DNS API key:
export GANDI_LIVEDNS_KEY="fdmlfsdklmfdkmqsdfk"
Run acme.sh like this:
acme.sh --issue --dns dns_gandi_livedns -d kosmos.org -d xmpp.kosmos.org -d chat.kosmos.org